$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72f597e7-2b6f-3ecc-a4cf-d9e0c71bfac9.roa File: 72f597e7-2b6f-3ecc-a4cf-d9e0c71bfac9.roa (raw, json) Hash identifier: AOc3CafRKBb3DgiejpdFF1ELJZPgP2D1JQPIkGnhwh0= Subject key identifier: B1:9F:DB:0A:25:0F:90:15:42:03:05:33:69:E8:D1:24:AE:90:FB:1E Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584DAE4FCDC1ABAE7CBF6395F590 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72f597e7-2b6f-3ecc-a4cf-d9e0c71bfac9.roa Signing time: Thu 30 Apr 2026 18:33:01 +0000 ROA not before: Thu 30 Apr 2026 18:33:01 +0000 ROA not after: Wed 29 Jul 2026 18:33:01 +0000 asID: 44559 IP address blocks: 166.1.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:4f:cd:c1:ab:ae:7c:bf:63:95:f5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Apr 30 18:33:01 2026 GMT Not After : Jul 29 18:33:01 2026 GMT Subject: CN=2aa9fa3c-f9c8-49f0-8594-912a2437dcea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:57:32:13:4c:34:7a:7b:70:77:00:cc:6d:81: f9:a2:47:45:33:4d:fe:08:2f:13:c2:83:15:1b:c6: e1:e6:4f:8d:fe:3b:97:0a:3f:46:b6:61:4f:62:9d: cd:77:05:8d:e1:d0:07:6b:35:45:71:31:c1:89:bf: 14:81:fc:6a:6e:48:a5:e4:d2:39:99:e1:f3:8d:b8: 20:14:96:3c:7e:f6:91:f4:44:1c:fa:09:3c:36:03: 84:3e:46:06:37:f9:3a:9b:46:bd:ad:13:16:5a:ab: 88:f3:8b:ce:e5:34:8b:2c:57:d9:46:91:9b:26:61: 84:9e:dc:3a:cb:f7:b1:6f:ed:a2:c3:36:37:4c:e9: 64:63:a6:3b:a5:d9:92:5c:34:f0:bd:99:3a:e0:48: 77:c4:4d:e8:61:b2:a6:98:b8:1a:ce:02:14:79:4f: c5:25:cc:0a:85:27:d0:00:70:22:8a:5a:a5:b1:6c: 28:28:ac:b6:ba:56:56:a2:07:08:7e:4c:c9:a3:8e: 2e:d8:31:89:08:54:6e:14:1f:19:d6:f2:51:13:6c: 3c:67:f9:0a:c2:1d:63:b3:79:31:c2:a4:cc:20:88: ca:e3:49:85:74:14:6e:e6:2a:53:2f:1c:0f:75:5d: 5d:a9:2a:a3:19:17:32:d1:dd:4f:14:ec:0c:f5:25: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9F:DB:0A:25:0F:90:15:42:03:05:33:69:E8:D1:24:AE:90:FB:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72f597e7-2b6f-3ecc-a4cf-d9e0c71bfac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:18:4b:b4:3a:3e:ae:12:32:d9:00:18:cb:73:71:80:0a:6c: cc:45:e0:ed:7b:9e:c1:37:5b:72:ac:2d:48:01:1c:e4:b0:81: f4:0d:5d:8d:5d:11:bf:0b:96:3a:f4:b6:c2:42:bc:67:bf:86: a0:82:34:f5:ad:56:1c:b4:4a:04:cd:00:e0:0f:08:5b:f1:5f: 9f:51:b4:b8:d5:04:d7:9b:60:bc:d2:c7:d8:2b:bb:25:3b:b3: 9a:33:66:7b:2d:92:68:d2:a3:0f:74:7a:06:b4:a1:b6:6c:5c: f1:30:e7:89:b8:bb:4c:e6:45:9f:b3:5f:4a:f0:41:a9:ae:07: 8a:7a:2e:50:23:ce:e0:0a:25:6a:99:7f:22:41:f6:40:fe:ca: b3:cd:f1:86:41:85:4a:7e:58:bd:8a:d4:91:b9:9d:a2:de:1a: 44:38:bf:81:9a:3f:fa:a1:2c:6e:93:8f:2c:86:86:cc:75:8a: 51:af:b0:b4:07:d9:10:f7:9f:62:5e:86:1f:16:87:f4:8b:62: 56:93:d6:25:d6:66:17:c7:9f:30:19:35:bf:e8:da:57:f9:30: 30:be:c2:6c:a3:76:81:c7:ed:4f:72:46:a6:58:ae:83:01:45: c7:46:91:16:34:74:8d:d1:60:ad:ac:9c:02:fb:29:da:02:72: df:8f:ae:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uT83Bq658v2OV9ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDQzMDE4MzMwMVoXDTI2MDcyOTE4MzMwMVowLzEtMCsGA1UEAxMk MmFhOWZhM2MtZjljOC00OWYwLTg1OTQtOTEyYTI0MzdkY2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFcyE0w0entwdwDMbYH5okdFM03+CC8TwoMV G8bh5k+N/juXCj9GtmFPYp3NdwWN4dAHazVFcTHBib8Ugfxqbkil5NI5meHzjbgg FJY8fvaR9EQc+gk8NgOEPkYGN/k6m0a9rRMWWquI84vO5TSLLFfZRpGbJmGEntw6 y/exb+2iwzY3TOlkY6Y7pdmSXDTwvZk64Eh3xE3oYbKmmLgazgIUeU/FJcwKhSfQ AHAiilqlsWwoKKy2ulZWogcIfkzJo44u2DGJCFRuFB8Z1vJRE2w8Z/kKwh1js3kx wqTMIIjK40mFdBRu5ipTLxwPdV1dqSqjGRcy0d1PFOwM9SVhPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGf2wolD5AVQgMFM2no0SSukPseMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzJmNTk3ZTctMmI2Zi0z ZWNjLWE0Y2YtZDllMGM3MWJmYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAYS7Q6Pq4SMtkAGMtzcYAKbMxF4O17nsE3W3KsLUgBHOSwgfQNXY1d Eb8Lljr0tsJCvGe/hqCCNPWtVhy0SgTNAOAPCFvxX59RtLjVBNebYLzSx9gruyU7 s5ozZnstkmjSow90ega0obZsXPEw54m4u0zmRZ+zX0rwQamuB4p6LlAjzuAKJWqZ fyJB9kD+yrPN8YZBhUp+WL2K1JG5naLeGkQ4v4GaP/qhLG6TjyyGhsx1ilGvsLQH 2RD3n2Jehh8Wh/SLYlaT1iXWZhfHnzAZNb/o2lf5MDC+wmyjdoHH7U9yRqZYroMB RcdGkRY0dI3RYK2snAL7KdoCct+PriM= -----END CERTIFICATE-----Generated at Sat May 2 23:07:22 2026 by rpki-client